Input validation flaw in Microsoft .NET Framework allows tampering
Priority MEDIUM 40CWE-1287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Microsoft .NET Framework 3.5, 4.6.2/4.7/4.7.1/4.7.2, 4.8 and 4.8.1 are affected. Improper validation of the specified type of input (CWE-1287) lets data be tampered with. An unauthorized remote attacker can tamper over the network without user interaction.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Description from the CNA
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00734 54th percentileScored 2026-11-07
Fix Fixed Microsoft .NET Framework 3.5 (Microsoft): 2.0.50727.9188 AND 3.0.30729.9171Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 (Microsoft): 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0+6 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Microsoft .NET Framework 3.5 | 3.5.0 to before 2.0.50727.9188 AND 3.0.30729.9171 | 2.0.50727.9188 AND 3.0.30729.9171 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | 3.0.0.0 to before 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 | 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 | 4.7.0 to before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 | 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 | 4.8.0 to before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 | 4.8.1 to before 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | 4.7.0 to before 4.7.4150.0 | 4.7.4150.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 4.8 | 4.8.0 to before 4.8.4811.0 | 4.8.4811.0 | Patch available | CNA |
| Microsoft | Microsoft .NET Framework 4.8.1 | 4.8.0.0 to before 4.8.9363.0 | 4.8.9363.0 | Patch available | CNA |
- Microsoft .NET Framework 3.5 VendorMicrosoft Affected 3.5.0 to before 2.0.50727.9188 AND 3.0.30729.9171 Fixed in 2.0.50727.9188 AND 3.0.30729.9171 Patch available CNA
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 VendorMicrosoft Affected 3.0.0.0 to before 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 Fixed in 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 Patch available CNA
- Microsoft .NET Framework 3.5 AND 4.7.2 VendorMicrosoft Affected 4.7.0 to before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 Fixed in 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 Patch available CNA
- Microsoft .NET Framework 3.5 AND 4.8 VendorMicrosoft Affected 4.8.0 to before 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 Fixed in 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 Patch available CNA
- Microsoft .NET Framework 3.5 AND 4.8.1 VendorMicrosoft Affected 4.8.1 to before 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 Fixed in 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 Patch available CNA
- Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 VendorMicrosoft Affected 4.7.0 to before 4.7.4150.0 Fixed in 4.7.4150.0 Patch available CNA
- Microsoft .NET Framework 4.8 VendorMicrosoft Affected 4.8.0 to before 4.8.4811.0 Fixed in 4.8.4811.0 Patch available CNA
- Microsoft .NET Framework 4.8.1 VendorMicrosoft Affected 4.8.0.0 to before 4.8.9363.0 Fixed in 4.8.9363.0 Patch available CNA
Remediation
Fixed versions are 2.0.50727.9188 AND 3.0.30729.9171 for .NET Framework 3.5, 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 for 3.5 with 4.6.2/4.7/4.7.1/4.7.2, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 for 3.5 with 4.7.2, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 for 3.5 with 4.8, 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 for 3.5 with 4.8.1, 4.7.4150.0 for 4.6.2/4.7/4.7.1/4.7.2, 4.8.4811.0 for 4.8 and 4.8.9363.0 for 4.8.1.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
- Fix · CNA Microsoft .NET Framework 3.5 (Microsoft) Fixed in 2.0.50727.9188 AND 3.0.30729.9171
- Fix · CNA Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 (Microsoft) Fixed in 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
- Fix · CNA Microsoft .NET Framework 3.5 AND 4.7.2 (Microsoft) Fixed in 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
- Fix · CNA Microsoft .NET Framework 3.5 AND 4.8 (Microsoft) Fixed in 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
- Fix · CNA Microsoft .NET Framework 3.5 AND 4.8.1 (Microsoft) Fixed in 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
- Fix · CNA Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 (Microsoft) Fixed in 4.7.4150.0
- Fix · CNA Microsoft .NET Framework 4.8 (Microsoft) Fixed in 4.8.4811.0
- Fix · CNA Microsoft .NET Framework 4.8.1 (Microsoft) Fixed in 4.8.9363.0
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 1 product
- Red Hat Hardened Images
Timeline
- 2026-10-13 Threatist record created from CVE-2026-97801
- 2026-10-13 Alias added: GHSA-pjfw-qhmc-7gc7
- 2026-10-14 CISA SSVC decision points changed
- 2026-10-14 Priority changed: MEDIUM → LOW
- 2026-10-14 Priority changed: LOW → MEDIUM
- 2026-10-23 Affected versions changed · Red Hat
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
More Microsoft vulnerabilities
- TI-2026-42212 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-37256 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-26194 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2026-16982 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2025-33671 Microsoft SharePoint Server Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-97801 · CVE Program
- CVE-2026-97801 · NVD
- FIRST EPSS
- GHSA-pjfw-qhmc-7gc7 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-97801 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences